Use trusted publishing and harden workflows

[markerikson]

This PR applies recommendations from https://e18e.dev/docs/publishing :

• Updates all Node versions to 24.x to allow use of trusted publishing with NPM
• Updates publish.yml to improve permissions and use Trusted Publishing settings
• Adds NPM tag support to the publish workflow
• Pins all Github Actions to specific SHAs
• Updates the .release-it.json files to not actually publish, so that we can use it to tag and push and then manually trigger a workflow from the repo

[codesandbox]

Review or Edit in CodeSandbox

Open the branch in Web Editor • VS Code • Insiders

Open Preview

[codesandbox-ci]

This pull request is automatically built and testable in CodeSandbox.

To see build info of the built libraries, click here or the icon next to each commit SHA.

Latest deployment of this branch, based on commit b6d1eb6:

Sandbox	Source
@examples-query-react/basic	Configuration
@examples-query-react/advanced	Configuration
@examples-action-listener/counter	Configuration
rtk-esm-cra	Configuration

[github-actions]

size-limit report 📦

Path	Size

[netlify]

✅ Deploy Preview for redux-starter-kit-docs ready!

Name	Link
🔨 Latest commit	b6d1eb6
🔍 Latest deploy log	https://app.netlify.com/projects/redux-starter-kit-docs/deploys/6935f1cb502500000884f9ce
😎 Deploy Preview	https://deploy-preview-5152--redux-starter-kit-docs.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.